Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/9fqGagQCaL9MHwqiYLgCAlKltnI.roa
File: 9fqGagQCaL9MHwqiYLgCAlKltnI.roa (raw, json)
Hash identifier: BoPMzB3MdLpYYYjTBd+oogzMIYiLuFwZJGpH1bZ5Vr0=
Subject key identifier: F5:FA:86:6A:04:02:68:BF:4C:1F:0A:A2:60:B8:02:02:52:A5:B6:72
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 0194214411A874DDA3562C5848E0D982871A
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/9fqGagQCaL9MHwqiYLgCAlKltnI.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59441
IP address blocks: 95.81.84.0/23 maxlen: 24
95.81.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:11:a8:74:dd:a3:56:2c:58:48:e0:d9:82:87:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5fa866a040268bf4c1f0aa260b8020252a5b672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:76:e5:ce:46:60:ef:4a:12:ff:32:a7:ab:
8c:20:9b:bc:65:e4:97:6d:15:a3:07:fc:ea:88:34:
0c:e6:f4:ca:4f:10:42:b4:1e:a9:29:30:2d:dd:b2:
6e:77:96:15:88:50:bb:8d:32:52:46:77:33:23:36:
09:99:bf:44:1a:58:37:1b:9f:54:d0:23:72:9d:70:
6a:19:70:79:5a:e8:03:18:e5:8c:2e:08:54:e1:82:
67:25:b4:40:e2:f4:4e:95:7f:0f:bb:ff:d1:d4:bc:
9e:1c:5a:64:76:9c:e8:22:50:0f:17:25:08:dc:ae:
19:d4:3a:5d:bd:a6:a1:56:5f:b8:92:0a:f6:c0:18:
8f:48:0e:db:95:48:ec:43:a0:e4:5a:56:32:86:3a:
08:99:28:1f:fb:60:0c:ff:34:63:a2:9b:38:95:f4:
3b:df:49:44:a5:3f:8a:97:ee:93:4b:b9:7e:21:ed:
60:e5:dc:fa:38:73:e6:df:dc:0b:7e:34:5e:c6:04:
e4:d4:3f:53:bd:80:73:39:4d:5b:08:2b:56:88:67:
e1:a2:dd:81:e3:d5:28:5c:cd:cb:5d:4d:88:92:b1:
fb:91:51:c9:ad:20:85:04:83:5a:5d:d6:7f:26:b6:
d7:b5:63:7b:5b:18:cd:18:9d:59:3c:b9:87:50:6b:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FA:86:6A:04:02:68:BF:4C:1F:0A:A2:60:B8:02:02:52:A5:B6:72
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/9fqGagQCaL9MHwqiYLgCAlKltnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.84.0/23
95.81.92.0/23
Signature Algorithm: sha256WithRSAEncryption
94:14:9a:8b:d4:fc:b8:46:50:d1:a5:a7:2b:19:72:18:d3:c8:
e9:c3:80:82:e0:ec:45:0b:02:e6:9c:ab:42:1c:d4:6b:23:74:
4d:67:3d:d0:15:04:23:68:4d:37:01:f7:d2:f8:34:da:88:c2:
c6:fa:7c:bd:73:b4:c3:3b:54:8f:eb:32:f2:46:b6:b4:11:00:
a4:60:fe:a5:e9:ce:9e:85:84:d1:65:4c:7b:4f:4b:7a:6b:d2:
34:66:94:ee:e1:d7:a2:c2:42:a0:38:79:33:87:63:aa:3d:80:
e3:07:16:95:5a:1f:04:16:b6:7e:0f:af:ad:d1:a2:30:e0:16:
7f:79:24:bf:2f:7a:40:49:5e:77:4c:55:16:4d:a0:6e:01:ae:
e2:c4:f8:d8:14:d7:09:95:c5:93:1d:52:c3:32:a9:a9:be:d5:
19:84:59:c4:9d:15:f7:e1:a9:14:08:17:89:fa:ca:bd:26:a2:
17:48:8e:90:ea:6f:18:39:ad:8b:8b:cc:50:2e:c6:58:45:bb:
6b:0c:46:c5:62:a1:71:50:ab:ae:6d:dc:84:8b:a7:eb:13:87:
9a:25:de:cf:4e:28:93:6b:74:95:04:35:d5:2e:f1:74:d3:a0:
5b:e9:48:fe:92:b4:99:66:9b:b9:ec:94:95:a9:dc:0b:ca:78:
aa:7e:25:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:28:58 2025 by rpki-client